
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa
File: ef04af22-a041-3bed-a165-40c5c8172575.roa (raw, json)
Hash identifier: nUk1T3dwoR5iZc5auCE9nCOeb2dwxNYagquVzr3zbgg=
Subject key identifier: 1C:34:59:26:F6:02:37:C3:7F:96:2E:35:15:88:FD:0A:4F:14:E8:3C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8D2B894D3D28BB384C2848
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa
Signing time: Wed 11 Dec 2024 01:55:17 +0000
ROA not before: Wed 11 Dec 2024 01:55:17 +0000
ROA not after: Tue 11 Mar 2025 00:55:17 +0000
asID: 13335
IP address blocks: 172.68.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8d:2b:89:4d:3d:28:bb:38:4c:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:55:17 2024 GMT
Not After : Mar 11 00:55:17 2025 GMT
Subject: CN=21a69660-f253-40b6-9119-0793984d18e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:37:3e:25:b6:b9:f2:6d:33:a1:9e:a8:01:
e6:62:f1:53:3e:94:81:d9:01:78:49:94:ca:71:75:
0c:87:fa:de:8c:8a:32:9d:ed:8f:06:e7:4b:f4:83:
ab:61:95:e8:cf:a0:0e:72:e4:c3:40:37:f8:f0:fe:
96:7a:e8:9e:36:1c:61:e5:e8:c9:d8:75:18:ef:48:
fd:0f:02:63:f4:cb:bc:ae:a5:9c:74:6f:0b:d3:7b:
4a:01:34:47:ba:b1:c6:19:a2:8e:73:d5:8f:71:fc:
be:ca:b7:9f:98:00:97:20:7e:98:1c:ee:ac:43:06:
3e:32:65:0b:82:45:c2:82:6f:be:eb:18:7c:65:9c:
5d:3e:63:02:fd:da:74:47:58:1e:a6:55:dc:fb:0a:
22:f1:12:87:de:ab:49:da:93:c1:02:4a:96:ec:05:
12:de:73:7a:da:fb:67:f0:61:f5:ad:1a:50:9e:f3:
fa:7f:5d:6b:bf:16:d0:4c:8e:47:a1:b1:d6:92:e4:
4a:ce:0a:53:cd:44:42:61:8b:d6:94:9d:e5:49:1b:
b4:96:05:10:6a:64:14:6a:de:6d:35:b8:c9:15:4b:
49:9a:1d:9d:d8:fd:55:43:a6:9b:a9:a9:fb:41:e6:
ee:58:93:20:ee:4f:a4:68:4b:d5:a3:96:c7:db:18:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:59:26:F6:02:37:C3:7F:96:2E:35:15:88:FD:0A:4F:14:E8:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef04af22-a041-3bed-a165-40c5c8172575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:b7:6b:41:60:f8:3a:cf:1c:e7:c5:b7:12:4e:91:23:18:5c:
d1:d2:18:41:2c:04:da:2f:b1:21:aa:d0:90:cb:e7:10:aa:05:
57:e5:83:83:91:73:f2:2d:0e:02:57:a8:bb:1b:1d:b2:f8:47:
01:2a:ee:e6:df:4c:96:b0:5d:01:1e:3a:d6:ab:65:3b:68:0e:
d0:65:be:1c:e2:58:e6:a2:a3:21:c3:b5:32:97:3c:c0:bf:9a:
ec:fb:b5:a1:8d:17:10:a0:69:75:23:14:b8:83:cd:ec:bb:e9:
1d:b7:46:85:8c:4e:38:af:c2:95:4d:42:8b:16:d6:e0:40:94:
85:29:75:2f:e9:38:f3:f0:d5:50:aa:2f:9c:d4:1b:9b:42:07:
91:13:03:9d:52:75:b8:6d:4c:06:de:07:ea:f2:52:1f:2d:4b:
47:98:2c:ba:f9:b0:1b:26:92:2a:34:7f:9d:99:66:94:88:95:
9c:cc:f6:34:2e:55:43:ca:d6:16:f7:7d:03:82:a6:5e:e1:31:
89:a0:04:9f:28:1e:47:d0:75:cc:b5:64:09:13:62:6c:4a:cc:
0e:76:1a:43:8b:0c:e8:23:ee:b0:e7:da:16:48:49:a5:bb:b8:
ef:0b:c2:8e:d0:c4:fd:33:f6:89:2a:40:c9:80:9d:50:f5:93:
6a:d9:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:19 2025 by rpki-client